This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File:                     3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier:          C0ey2criY5LeHbcSCYI5B+vhnRCykNueRDZOKwOWmH8=
Subject key identifier:   CC:85:20:4A:F1:B8:1C:93:59:01:5D:F3:F1:38:35:90:0A:9E:14:E3
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer:       /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial:       019C438FB229772EBD693A24E2C9E3514EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number:          0235
Signing time:             Mon 09 Feb 2026 18:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:16 +0000
Files and hashes:         1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: ig2aX5dIrRtJsDaSSDlSUpzLGLqHoPbAZdr8De3YacM=)
                          2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
                          3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:b2:29:77:2e:bd:69:3a:24:e2:c9:e3:51:4e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
        Validity
            Not Before: Feb  9 18:00:16 2026 GMT
            Not After : Feb 10 18:00:16 2026 GMT
        Subject: CN=cc85204af1b81c9359015df3f13835900a9e14e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:22:67:93:d1:eb:ce:de:09:e7:1a:63:7e:
                    0f:f4:f5:65:5f:6c:7f:b1:e7:18:07:76:2a:dd:80:
                    f3:dd:bc:04:4e:ab:f7:10:49:d4:b2:a9:be:20:f3:
                    0d:16:ed:93:bb:cf:a1:21:b6:9b:62:42:40:da:98:
                    8e:2b:b9:36:6a:37:6b:9e:08:1a:74:d5:f6:81:d9:
                    13:65:c3:4a:ab:3b:01:77:7c:5b:0e:ae:99:49:12:
                    89:24:7b:83:37:14:f1:20:0b:87:d2:21:00:fc:c4:
                    51:8d:98:fa:ae:ee:55:ce:88:00:a9:b1:8a:81:0d:
                    59:4e:df:9f:84:c5:8c:df:35:40:e1:04:d0:ae:0b:
                    f3:b7:6b:ab:52:a0:c5:01:99:39:b3:72:d3:4b:27:
                    e1:d4:44:38:c8:e7:42:e5:75:9e:79:fd:14:02:11:
                    d9:c4:d3:ee:7a:69:96:e9:85:8d:3a:18:b0:87:c6:
                    ef:be:39:71:22:ae:4e:07:be:56:3d:fc:05:2c:3f:
                    21:f7:37:16:15:78:cc:58:bc:c3:d8:ff:f8:10:90:
                    eb:f0:68:9a:37:15:ee:bf:51:37:e1:ea:3f:c2:3c:
                    64:f8:d2:9d:87:e2:11:31:62:73:04:98:36:27:ae:
                    85:b2:ba:c6:43:00:ab:f4:8a:02:b1:ba:da:2c:b9:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:20:4A:F1:B8:1C:93:59:01:5D:F3:F1:38:35:90:0A:9E:14:E3
            X509v3 Authority Key Identifier:
                keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:fd:ff:1a:a3:72:b7:4e:19:3c:c2:70:e7:d0:03:cd:57:
         b8:e3:94:34:a6:51:5d:97:b8:87:39:8a:08:5a:3d:eb:bb:e4:
         21:b7:76:70:f5:22:d0:80:9b:0f:f1:4a:53:08:ad:5e:53:33:
         32:f3:ac:9a:68:3f:a0:98:50:02:66:d2:fb:05:8a:ac:9f:d3:
         cc:dd:34:42:0c:5d:9f:34:58:0c:c8:19:17:24:f1:4a:04:dc:
         e1:83:28:d9:c7:e4:53:a9:96:59:11:af:33:aa:fb:9f:f1:75:
         57:88:42:ca:f2:8a:a5:fa:42:4c:77:aa:dc:2c:0c:5b:b3:51:
         88:67:bf:49:2f:50:d5:24:14:dd:55:5e:a8:e8:f0:de:d6:1d:
         d6:ca:6d:c1:bb:b6:89:87:bd:22:39:c9:75:be:51:c9:d8:e6:
         98:2f:a9:ac:2e:a9:09:55:78:10:da:64:3e:fa:b2:06:a5:c8:
         f7:bd:fe:88:e9:1f:64:65:b5:2f:c2:47:ec:62:fc:54:bf:c3:
         9a:3c:48:46:38:9c:7b:55:86:ff:f0:c3:30:09:f5:09:25:77:
         d7:93:ea:62:a4:69:d7:65:cc:d7:c6:70:2e:b1:74:8a:52:63:
         17:90:f2:6d:5b:5a:f8:fd:00:07:77:cc:56:d7:66:88:3d:2d:
         e3:c8:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:45 2026 by rpki-client